Analysis and verification of XACML policies in a medical cloud environment

TitreAnalysis and verification of XACML policies in a medical cloud environment
Publication TypeJournal Article
Year of Publication2016
AuthorsAyache, Ma, Erradi, Ma, Khoumsi, Ab, Freisleben, Bc
JournalScalable Computing
Volume17
Pagination189-205
Abstract

The connectivity of devices, machines and people via Cloud infrastructure can support collaborations among doctors and specialists from different medical organisations. Such collaborations may lead to data sharing and joint tasks and activities. Hence, the collaborating organisations are responsible for managing and protecting data they share. Therefore, they should define a set of access control policies regulating the exchange of data they own. However, existing Cloud services do not offer tools to analyse these policies. In this paper, we propose a Cloud Policy Verification Service (CPVS) for the analysis and the verification of access control policies specified using XACML. The analysis process detects anomalies at two policy levels: a) intra-policy: detects discrepancies between rules within a single security policy (conflicting rules and redundancies), and b) interpolicies: detects anomalies between several security policies such as inconsistency and similarity. The verification process consists in verifying the completeness property which guarantees that each access request is either accepted or denied by the access control policy. In order to demonstrate the efficiency of our method, we also provide the time and space complexities. Finally, we present the implementation of our method and demonstrate how efficiently our approach can detect policy anomalies. © 2016 SCPE.

URLhttps://www.scopus.com/inward/record.uri?eid=2-s2.0-84986332574&doi=10.12694%2fscpe.v17i3.1180&partnerID=40&md5=86b782c01a2231027ed2e7308e178385
DOI10.12694/scpe.v17i3.1180
Revues: 

Partenaires

Localisation

Suivez-nous sur

         

    

Contactez-nous

ENSIAS

Avenue Mohammed Ben Abdallah Regragui, Madinat Al Irfane, BP 713, Agdal Rabat, Maroc

  Télécopie : (+212) 5 37 68 60 78

  Secrétariat de direction : 06 61 48 10 97

        Secrétariat général : 06 61 34 09 27

        Service des affaires financières : 06 61 44 76 79

        Service des affaires estudiantines : 06 62 77 10 17 / n.mhirich@um5s.net.ma

        Résidences : 06 61 82 89 77

Contacts

    

    Compteur de visiteurs:539,861
    Education - This is a contributing Drupal Theme
    Design by WeebPal.